hexbear

10261 readers

2 users here now

Now that the old Hexbear fork has been officially abandoned, this community will be used as a space for meta-discussion on the site itself.

founded 4 years ago

MODERATORS

[email protected]

137

We should get on top of the link tracking problem (hexbear.net)

submitted 10 months ago by [email protected] to c/[email protected]

27 comments fedilink hide all child comments

I've noticed a rise in people sharing links to YouTube, Instagram, Twitter, TikTok, and reddit that include tracking parameters in the URL.

It might largely be harmless for now, but it's not good to let companies build a web of links between users of this site, and to link the usernames of users on this site to their off-site accounts, which may include sensitive info.

SM	URL Part	Appearance in URL	Filtration technique
Youtube	Query	?si=*	Remove query string
Instagram	Query	?igshid=*	Remove query string
Twitter	Query	?t=	Remove query string
Tiktok	Subdomain and path	(vm/vt).tiktok.com/(random_string)	Block
reddit	Path	/(sub_name)/s/(random_string)	Block

This site should only allow canonical links to the content to limit the information exposed.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 28 points 10 months ago* (last edited 10 months ago) (2 children)

Agreed. This should be easy enough to implement, no?

EDIT: if we're scrubbing metadata from posted images we should absolutely be doing this.

[–] [email protected] 4 points 10 months ago

Now that the thread quietened down, I did want to comment on image sharing as well. We already know that Facebook implements tracking in metadata, but there is a concern that they might resort to advanced steganography to link images shared on other sites to their origins. If you're familiar with unsee(.)cc, they implement this by just straight up plastering your IP over the image, but this could be taken further by encoding dots or some wave pattern. Combatting this is really difficult, and I don't expect us to be able to do much. Personally I've been applying a slight imperceptible distortion to images which I shared from somewhere I expect to get tracked on, but that's extremely overkill. Just wanted to share, since I doubt I'll get another outlet.